Lepton-cms
Lepton-cms Leptoncms: vulnerabilidades y CVE
Lepton-cms Leptoncms tiene 8 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE8
Últimos 12 meses1
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-56704 | Alta (8.8) | 0.77% | — | 9 dic 2025 | LeptonCMS version 7.3.0 contains an arbitrary file upload vulnerability, which is caused by the lack of proper validation for uploaded files. An authenticated attacker can exploit this vulnerability by uploading a… |
| CVE-2024-29514 | Alta (8.8) | 1.3% | — | 2 abr 2024 | File Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute arbitrary code via uploading a crafted PHP file. |
| CVE-2024-29515 | Alta (8.8) | 1.2% | — | 25 mar 2024 | File Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute arbitrary code via uploading a crafted PHP file to the save.php and config.php component. |
| CVE-2024-24520 | Alta (7.8) | 0.42% | — | 21 mar 2024 | An issue in Lepton CMS v.7.0.0 allows a local attacker to execute arbitrary code via the upgrade.php file in the languages place. |
| CVE-2024-24399 | Alta (7.2) | 16% | — | 25 ene 2024 | An arbitrary file upload vulnerability in LEPTON v7.0.0 allows authenticated attackers to execute arbitrary PHP code by uploading this code to the backend/languages/index.php languages area. |
| CVE-2020-24872 | Media (6.1) | 0.51% | — | 11 ago 2023 | Cross Site Scripting (XSS) vulnerability in backend/pages/modify.php in Lepton-CMS version 4.7.0, allows remote attackers to execute arbitrary code. |
| CVE-2020-29240 | Media (4.8) | 1.7% | — | 2 dic 2020 | Lepton-CMS 4.7.0 is affected by cross-site scripting (XSS). An attacker can inject the XSS payload in the URL field of the admin page and each time an admin visits the Menu-Pages-Pages Overview section, the XSS will be… |
| CVE-2020-12705 | Media (6.1) | 0.64% | — | 7 may 2020 | Multiple cross-site scripting (XSS) vulnerabilities exist in LeptonCMS before 4.6.0. |